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DETAILED ACTION 

Response to Arguments 

1 . Applicant's arguments with respect to claims 1 -9 have been considered but are 
moot in view of the new ground(s) of rejection. 

Claim Rejections - 35 USC § 103 

2. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1 , 148 
USPQ 459 (1966), that are applied for establishing a background for determining 
obviousness under 35 U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating 
obviousness or nonobviousness. 

4. Claims 1-15 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Aura 6373949 in view of Labaton US 20060005028A1 . 

As to claim 1 , Aura discloses a process to identify a user of the terminal resource 
by a server resource in a telecommunication network, using a first identifier, where an 
encryption algorithm with a key is implemented in the terminal resource (see col. 3, line 
54 - col. 4, line 5), comprising the following steps: generating a random number in the 
user terminal resource (see fig. 5, step 501); determining in the terminal resource of a 
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second identifier as a function of the random number, at least from part of the first 
identifier and from the result of executing the encryption algorithm to which at least the 
random number is applied (see fig. 5, items 502-503) transmitting the second identifier 
to the server resource, and in the server resource, retrieval of retrieving the first 
identifier at least by executing the encryption algorithm to which a key and, at least 
partially, the second transmitted identifier are applied, so that the server resource 
verifies that the first retrieved identifier is written into a memory of the server resource 
(see fig. 5, items 505-506; col. 4, line 36 - col. 5, line 50). Aura does not specifically 
disclose using an asymmetrical algorithm. However, note that two keys are being used 
one for encrypting and the other for decrypting. In an analogous art, Labaton discloses 
using an asymmetrical algorithm (see par.0036, 0068), thereby using a public and 
private keys. Therefore, it would have been obvious to one of the ordinary skill in the art 
at the time of the invention to use an asymmetrical algorithm for the simple purpose of 
using existing algorithm such as RSA, ECDSA and increase the security of the data. 

As to claim 2, Aura discloses a process in which the at least one authentication 
further including the step of authenticating the terminal resource by the server resource 
(see fig. 5, items 505-506). 

As to claim 3, Aura discloses a process in which the determination in the terminal 
resource includes application of the generated random number to the encryption 
algorithm with the public key to produce an encrypted random number, application of 
the generated random number and of the first identifier to encryption algorithm 
implemented in the terminal resource, to produce an encrypted identifier, and 
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concatenation of the encrypted random number and of the encrypted identifier in the 
second identifier to be transmitted to the server resource and wherein the retrieval in the 
server resource includes application of the encrypted random number to the encryption 
algorithm with the key, in order to retrieve the generated random number, and 
application of the retrieved random number, and of the encrypted identifier to the 
encryption algorithm, in order to retrieve the first identifier (see fig. 5, items 501-506; col. 
4, line 36 - col. 5, line 50). Aura does not specifically disclose using an asymmetrical 
algorithm. In an analogous art, Labaton discloses using an asymmetrical algorithm (see 
par.0036, 0068). 

As to claim 4, Aura discloses a process wherein the determination in the terminal 
resource includes application of the generated random number concatenated to the first 
identifier, to the asymmetrical algorithm with the public key to produce the second 
identifier to be transmitted to the server resource, and wherein the retrieval in the server 
resource includes application of the second identifier to the cyber algorithm with the key 
in order to retrieve the first identifier, (see fig. 5, items 501-506; col. 4, line 36 - col. 5, 
line 50). .Aura does not specifically disclose using an asymmetrical algorithm. However, 
note that two keys are being used one for encrypting and the other for decrypting. In an 
analogous art, Labaton discloses using an asymmetrical algorithm (see par.0036, 
0068), thereby using a public and private keys. Therefore, it would have been obvious 
to one of the ordinary skill in the art at the time of the invention to use an asymmetrical 
algorithm for the simple purpose of using existing algorithm such as RSA, ECDSA and 
increase the security of the data. 
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As to claim 5, Aura discloses everything as explained above except for the 
process further including the steps of changing the public key and the private key for the 
asymmetrical algorithm in the server resource, and downloading of the changed public 
key from the server resource to the terminal resource. Labaton discloses process 
further including the steps of changing the public key and the private key for the 
asymmetrical algorithm in the server resource, and downloading of the changed public 
key from the server resource to the terminal resource (see par. 0049), thereby 
increasing the security. 

As to claim 6, Aura discloses a process wherein the generation of the random 
number is periodic (recurring, repeated) in the terminal resource (see col. 5, lines 46- 
50). 

As to claim 7, Aura discloses a process wherein the generation of the random 
number occurs following activation of a service application (transfer of subscriber 
identity, col. 4, lines 25-51). 

As to claim 8, Aura discloses a user terminal resource identifying itself, or 
identifying a user of the latter, to a server resource, through a telecommunication 
network using a first identifier, an encryption algorithm with a key implemented in the 
terminal resource, comprising: a resource to generate a random number (see fig. 5, 
item 501), and a resource, to determine a second identifier as a function of the random 
number, at least from part of the first identifier and from the result of executing the 
encryption algorithm to which at least the random number is applied in order to transmit 
the second identifier to the server resource (see fig. 5, items 502-503), which retrieves 
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the first identifier at least by executing the encryption algorithm to which a key and, at 
least partially, the second identifier are applied, and which verifies that the first 
retrieved identifier is written into a memory of the server resource (see fig. 5, items 505- 
506; col. 4, line 36 - col. 5, line 50). Aura does not specifically disclose using an 
asymmetrical algorithm. However, note that two keys are being used one for encrypting 
and the other for decrypting. In an analogous art, Labaton discloses using an 
asymmetrical algorithm (see par.0036, 0068), thereby using a public and private keys. 
Therefore, it would have been obvious to one of the ordinary skill in the art at the time of 
the invention to use an asymmetrical algorithm for the simple purpose of using existing 
algorithm such as RSA, ECDSA and increase the security of the data. 

As to claim 9, Aura discloses a user terminal resource which wherein the 
resource to generate a random number and the resource to determine a second 
identifier are included in a portable electronic object of the chip card type (see col. 4, 
lines 48-51). 

As to claim 10, Aura discloses method for identifying at least one of a terminal 
and a user of the terminal to a server in a telecommunications network, comprising the 
following steps: generating a random number in the terminal (see fig. 5, item 501); 
applying said random number and a first identifier associated with said terminal to at 
least one cyber algorithm in said terminal, using a key, to generate a second identifier 
that is based upon a combination of said random number and said first identifier (see 
fig. 5, item 502-503); transmitting said second identifier to said server; applying said 
second identifier to said cyber algorithm in said server, using a key, to derive said first 
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identifier; and authenticating said terminal or said user in the server, using the derived 
first identifier (see fig. 5, items 505-506; col. 4, line 36 - col. 5, line 50). Aura does not 
specifically disclose using an asymmetrical algorithm. However, note that two keys are 
being used one for encrypting and the other for decrypting. In an analogous art, Labaton 
discloses using an asymmetrical algorithm (see par.0036, 0068), thereby using a public 
and private keys. Therefore, it would have been obvious to one of the ordinary skill in 
the art at the time of the invention to use an asymmetrical algorithm for the simple 
purpose of using existing algorithm such as RSA, ECDSA and increase the security of 
the data. 

As to claims 11-12, Aura discloses the method wherein said random number is 
applied to said cyber algorithm in said terminal, together with said key, to generate a 
first result (see fig. 5, item 502), and said first identifier is applied to a second, 
symmetric (related) algorithm in said terminal, together with a key, to generate a second 
result, and wherein said second identifier comprises a combination of said first and 
second results (see fig. 5, item 503). Aura does not specifically disclose using an 
asymmetrical algorithm (using public private keys). However, note that two keys are 
being used one for encrypting and the other for decrypting. In an analogous art, Labaton 
discloses using an asymmetrical algorithm (see par.0036, 0068), thereby using a public 
and private keys. Therefore, it would have been obvious to one of the ordinary skill in 
the art at the time of the invention to use an asymmetrical algorithm for the simple 
purpose of using existing algorithm such as RSA, ECDSA and increase the security of 
the data. 
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As to claim 13, Aura discloses the method wherein said second identifier 
comprises a concatenation of said first and second results (see fig. 5, items 502-503). 

As to claim 14, Aura discloses the method wherein said random number is 
combined with said first identifier, and the combination of said random number and said 
first identifier is applied as an input to said cyber algorithm in said terminal, together with 
said key, to generate said second identifier (see fig. 5, items 502-503). Aura does not 
specifically disclose using an asymmetrical algorithm (using public private keys). 
However, note that two keys are being used one for encrypting and the other for 
decrypting. In an analogous art, Labaton discloses using an asymmetrical algorithm 
(see par.0036, 0068), thereby using a public and private keys. Therefore, it would have 
been obvious to one of the ordinary skill in the art at the time of the invention to use an 
asymmetrical algorithm for the simple purpose of using existing algorithm such as RSA, 
ECDSA and increase the security of the data. 

As to claim 15, Aura discloses the method wherein said combination comprises a 
concatenation of said random number and said first identifier (see fig. 5, items 502-503). 
Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to MARCOS L. TORRES whose telephone number is 
(571 )272-7926. The examiner can normally be reached on 9:30 am - 6:00 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, George Eng can be reached on 571-252-7495. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/George Eng/ 

Supervisory Patent Examiner, Art Unit 2617 

/Marcos L Torres/ 
Examiner, Art Unit 2617 



